Wireless Access

Which default values you all guys change always and why?

For example

I normally change the value of the Max Associations to 25 or 30  which is per radio...

Why i change that ?

Because i think that sharing that small ammount of bandwidth is silly

What default values you recommend we should change and why?

Good question/dialogue.

Off the top of my head:   I always

a) change the IPS settings for Rogue Containment up to  Wired Containment = yes and Wireless containment = Tarpit-all-stations.

b) Add voice aware scanning, beside video aware scanning

c) add Qos Profiles for Fair-Access to all AP-groups

.. more to follow.

Yeah i also always add the QoS for Fair Access on all the groups

Ill search the other values you said... to see where i change them....

It will be good if we can all share this information, as we will deploy better configurations :)

The scanning is under ARM profile.    The IPS is in the IDS category and Profiles.

Thanks for starting this thread!

BTW, another thought on modification of defaults:

I always modify the IPSEC retries in AP-system profile.   360 is too high for my liking in most scenarios.   I chop off the zero and go down to 36 right away.  

With gather my thoughts with some more later today to minimize posting 1-2 at a time.

JF

Let see if we can collect a lot of this and maybe we can create a list for everyone.

Like  a list of default values that are good to change to optimize the configuration!

Btw thanks i found the values you said... :)

Jfernyc

Why would you want to reduce the time for this? which is the reason? i mean  this is the  Number of times the AP will try to create an IPsec tunnel with the master controller before the AP will reboot.

but why you would want it to be smaller to reboot faster? is there a reason fo rthis? im trying to undesrtand

Thanks in advance

I modify this setting as the default will 'hide' or 'mask' problems with the WAN more than I want them too.

My approach is that if the WAN is sick it ought to be addressed, not band-aided ;)

And two more for the 'list':

- Activate Dynamic Multicast Optimization (DMO) under Virtual AP

- Activate Band Steering, under Virtual AP

Yes i always activate the band Steering

What about Multicast Optimization it is the one that says 

Multicast Optimization for Video?

This setting under Virtual-Ap 

Dynamic Multicast Optimization (DMO)

Its the same screen as the band-steering is configured upon

Hello Jfernyc

The other default value that i change when Multicast is not requiered 

Drop Broadcast and Multicast and  Convert Broadcast ARP requests to unicast

As far i know this will help with the performance as everytime a network does broadcast  it cannot transmit and then a ping drop can happen

Do you ever change this default values? or is not recommended?

Also i was reading about the dynamic multicast optimization

http://www.arubanetworks.com/pdf/technology/DG_Video-Reference-and-Design-Guide.pdf

Interesting reading....

Besides that i got a question for you just to confirm...

When you enable voice aware scanning  does this mean that when its enable it will not scan on other channel  like when it does when the AP is on AM, which scan all channels... well here it will not spent any time on other channel when a voip call is in progress

Iam right?

Cheers

Carlos

NightShade1 -

In your initial post regarding "default values", part of what you state is "I normally change the value of the Max Associations to 25 or 30  which is per radio..." 

My question is if the max associations setting is under a specific SSID profile, does that setting get propagated to each AP supporting that particular SSID - and does that then imply that the "max associations" is on a per AP basis and not a maximum for the entire SSID?  And if that AP has radios for a/b/g/n, then that "max associations" setting would be applied to each of the radios (as it seems you imply in the first sentence) for that AP?  Meaning, if you adjust the max to be 25 associations for SSID "abcd" for example, and a particular AP supporting that SSID has radio support for a/b/g/n, then you're saying that each SSID being managed by each radio would support the 25 associations setting?

Thanks in advance.

Joe